Lucene search
K

6 matches found

OSV
OSV
added 2026/03/20 4:16 a.m.1 views

UBUNTU-CVE-2026-32945

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

9.8CVSS5.8AI score0.00072EPSS
Exploits1References4
Cvelist
Cvelist
added 2026/03/20 3:54 a.m.17 views

CVE-2026-32945 PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such as those configured with...

8.4CVSS0.00072EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/20 12:26 a.m.4 views

CVE-2026-26967

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL...

9.3CVSS5.8AI score0.00014EPSS
Exploits0References3
OSV
OSV
added 2026/02/20 12:26 a.m.3 views

CVE-2026-26967 PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL...

9.3CVSS5.8AI score0.00014EPSS
Exploits0References4
CVE
CVE
added 2022/04/25 12:0 a.m.132 views

CVE-2022-24792

CVE-2022-24792 affects the PJSIP library (32-bit systems) and prior releases (up to 2.12). The issue arises when reading WAV file data chunks with lengths exceeding 31-bit integers, which can trigger a denial-of-service condition. The vulnerability does not affect 64-bit apps and may not impact a...

7.5CVSS7.5AI score0.01612EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2022/04/25 12:0 a.m.2 views

PT-2022-2679 · Pjsip +3 · Pjsip +3

Name of the Vulnerable Software and Affected Versions: PJSIP versions 2.12 and prior Description: The issue is related to a denial-of-service condition that occurs when handling WAV files. It affects 32-bit systems using PJSIP to play or read invalid WAV files, specifically when reading WAV file...

9.8CVSS8AI score0.01675EPSS
Exploits2References86
Rows per page
Query Builder